JS:Iframe-CG[Trj] & JS:Downloader-AZF[Trj]

Avast Free Antivirus / Premium Security
1

I created a website by myself, Avast alarms that threats found:

JS:Iframe-CG[Trj] & JS:Downloader-AZF[Trj]

And cannot repair them, Error: The file was not repaired. (42060)

I cannot even open the website anymore on my computer, but can visit it on any other computer without Avast, all other anti-virus / Internet Security softwares did not find any problem with the website or the files on it. I’ve tried latest Kaspersky, NIS, Norton Enterprise, ESET Nod32, all of them found nothing wrong with the files.

Some JS are downloaded from WordPress official installation pack, Avast finds treats in it. How come? I Scanned my computer for treats, Avast found nothing, only those file on the website have problem.

I even contacted my hosting company, they did not find any treats too!

I wonder if I can send the file to a Avast expert to exam the codes?
To me it seems false positive report, but I cannot edit / visit my website on my computer unless I uninstall the Avast!

2

JS:Iframe-CG[Trj] & JS:Downloader-AZF[Trj]

When threats were identified.
So it has proved identified Files.

3

first of all i’m assuming that by “treats”,you mean threats,since halloween isn’t here yet,lol. ;D
as for the website,you can post link here so developers can see it and see what the problem is.
just make sure you dont post the link as active,e.g by replacing http with hxxp.

4

xxxxxxxxxxxx

I backed up it with ftp software, then Avast found 25 threats in the backup folder! And could not repair them, I cannot delete those files, or the website will not function properly.

Also Sucuri.net SiteCheck can find the codes that contain threats.

Thanks all, really appreciate!

5

you’re welcome.

is it can or can’t?
because if it’s can,then there probably is some sort of infection.

if they are in fact infected,some of the other members here(or developers)will tell you how to proceed.

6

I tried to replace the infected javascript files with the originals, seems solve the problem,
but still has MW:IFRAME:HD203 on the index page, seems came from some SEO scripts

Okay, finally got rid of the virus / threats / Trjs / MWs,

it’s the SEO tool generated js codes that was infected. Removing those codes solved the problem.

Thanks guys!

7

no problem,good luck. :slight_smile: